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BACKGROUND OF THE INVENTION 

5 

[01] This invention relates generally to the field of financial transactions, and in 

particular to financial transactions where one or more electronic records of the transaction are 

|=» produced. More specifically, the invention relates to the monitoring of such financial 

CI 

transactions. 

III 

^0 [02] Every day millions of financial transactions occur throughout the world. In 

i5 most cases, electronic records of the transactions are created. For example, one common type 

of financial transaction involves the use of a presentation instrument, such as a credit card, a 
CI debit card, and the like. When such a presentation instrument is used to make a purchase, 
f=i information stored on the card is often read by a point of sale device which creates an 
1:15 electronic record of the purchase. In the case of credit cards, the information read by the 
ni point of sale device along with the amount of the purchase may be routed through various 
other entities in order to complete the purchase. For example, the transaction information 
may be electronically sent to the merchant's bank or financial institution, to a card hold 
association, such as VISA or MasterCard, and to the issuer's bank or financial institution. 
20 Each of these entities may also store information regarding the transaction. 

[03] Recent events have proven that presentation instruments may be used by 

individuals for potentially harmful or illegal activities. However, the task of identifying 
suspect purchases in sufficient time to monitor individuals making such purchases has proven 
to be difficult, even when various electronic records of such transactions exist. 

25 [04] In addition to the monitoring of financial transaction for suspicious activities, 

there is also a need to monitor financial transactions for other reasons. For example, a 
primary card holder having an account with secondary or other cardholders may wish to 
monitor purchases charged to the account in near real time. Marketing groups may also wish 
to know spending habits of consumer in a more expedited manner. 




[05] Hence, this invention is related to the monitoring of financial transactions and 

of producing reports on financial activities in a more expedited manner. 

BRIEF SUMMARY OF THE INVENTION 

5 [06] Embodiments of the present invention thus provide a method of monitoring 

financial transactions. The method includes periodically receiving a target account identifier 
of a suspect account and receiving financial transaction information. The financial 
transaction information includes transaction records for a plurality of financial transactions 
that each have at least one associated account identifier. The method further includes 

.tSiZ. 

i^O comparing the target account identifier with the transaction information to determine if the 

target account identifier matches any of the account identifiers of the transaction information. 
Q If a match is found, the method further includes generating an alert having at least a portion 
\ll of the transaction record that has an account identifier matching the target account identifier. 

[07] The method may include electronically transmitting the alert to a provider of 

Ml 

f;|5 the target account identifier, to an owner of the suspect account, to a designee of a provider of 
'K the target account, and/or a compiler of marketing information relating to the account. The 
ni marketing information may include the spending habits of a user of the suspect account. The 
target account identifier may include a suspect credit card number. The transaction records 
may include transaction location, data of transaction, time of transaction, and account holder 
20 name. The comparing and transmitting steps may be performed within about 15 minutes, 5 
minutes, one minute, or less from the time that a transaction record having an account 
identifier matching the target account identifier is received. Generating the alert may include 
processing electronic data into an electronic textual message representing at least a portion of 
the content of the electronic data. 

25 [08] In other embodiments, methods of monitoring financial transactions include, 

at a processing server, periodically receiving a list having a plurality of target account 
identifiers and periodically transmitting at least a portion of the list to one or more platform 
servers. The one are more platform servers are each configured to receive transaction 
information that includes transaction records of financial transactions. The transaction 

30 records include account identifiers used in the transactions. The one or more platform servers 
are configured to search the transaction information for transaction records having a target 
account identifier from the list. The method also includes at the processing server, receiving 
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from a platform server an alert that the platform server has identified a transaction record 
having a target account identifier. The alert includes transaction data from the transaction 
record. The method also includes transmitting from the processing server a notification based 
on the alert that a target account identifier has been identified in a transaction record. 

[09] The list may be contained in an electronic file from a government agency. The 

list may be received by the processing server at least daily. The list may be requested by at 
least one platform server at least daily. The method may also include, upon receipt of the list 
at the processing server, transmitting from the processing server a list available message to at 
least one platform server indicating that the processing server has received the list, in 
response to which at least one platform server transmits a request to the processing server to 
send the list. The method also may include transmitting the list from the processing server to 
at least one platform computer upon receipt of the list by the processing server. The 
notification may be transmitted by email and may be transmitted to a personal computer, 
including such personal computers as, for example, a mobile phone, personal pager, or 
personal digital assistant. The method may further include processing the alert at the 
processing server by combining transaction data from the alert with stored transaction data 
relating to the target account identifier, in which case the notification may be based on the 
alert and the stored transaction data. 

[10] In other embodiments, methods of monitoring financial transactions include 

receiving from a processing server a list having at least a target account identifier and 
receiving transaction information. The transaction information includes transaction records 
of financial transactions, which include account identifiers used in the transactions. The 
method also includes searching the transaction information for transaction records having a 
target account identifier from the list. Upon the occurrence of a match, an alert is generated 
having at least a portion of the transaction record that has an account identifier matching a 
target account identifier. The method also includes transmitting the alert to the processing 
server. 

[11] In still other embodiments, a system for monitoring financial transactions 

includes a processing server and at least one platform server in electronic communication 
with the processing server. The processing server is configured to receive a list of target 
account identifiers and transmit the list to the at least one platform server. The at least one 
platform server is configured to receive the list of target account identifiers. The at least one 
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platform server is further configured to receive transaction information, including transaction 
records of financial transactions having account identifiers used in the transactions. The at 
least one platform server is further configured to compare the account identifiers in the 
transaction records to target account identifiers on the list. Upon the occurrence of a match 
5 between a target account identifier and an account identifier in a transaction record, the at 
least one platform server is configured to produce an alert and transmit the alert to the 
processing server. The processing server is configured to produce a notification based on the 
alert and transmit the notification to a personal computer. 



1^:, [12] In yet other embodiments, a system for monitoring financial transactions 

lEjo includes a processing server and a communications arrangement associated with the 

»il processing server. The communications arrangement is configured to facilitate electronic 

communication between the processing server and at least a platform server. The processing 
1=^ server is configured to receive a list of target account identifiers and transmit the list to a 
15 platform server. A platform server is configured to receive the list of target account 
i^jS identifiers. A platform server is further configured to receive transaction information, 

including transaction records of financial transactions having account identifiers used in the 
Cj transactions. A platform server is further configured to compare the account identifiers in the 
■ transaction records to target account identifiers on the list. Upon the occurrence of a match 

between a target account identifier and an account identifier in a transaction record, a 



20 platform server is configured to produce an alert and transmit the alert to the processing 

server. The processing server is configured to produce a notification based on the alert and 
transmit the notification to a personal computer. The personal computer may be, for 
example, a mobile phone, personal pager, or personal digital assistant. 



25 includes a platform server and a communications arrangement associated with the platform 
server. The communications arrangement is configured to facilitate electronic 
communication between the platform server and a processing server. The processing server 
is configured to receive a list of target account identifiers and transmit the list to the platform 
server. The platform server is configured to receive the list of target account identifiers and 

30 to receive transaction information, including transaction records of financial transactions 

having account identifiers used in the transactions. The platform server is further configured 
to compare the account identifiers in the transaction records to target account identifiers on 



[13] 



In still other embodiments, a system for monitoring financial transactions 
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the list. Upon the occurrence of a match between a target account identifier and an account 
identifier in a transaction record, the platform server is configured to produce an alert and 
transmit the alert to the processing server. The processing server is configured to produce a 
notification based on the alert and transmit the notification to a personal computer. 

5 [14] Reference to the remaining portions of the specification, including the 

drawings and claims, will realize other features and advantages of the present invention. 
Further features and advantages of the present invention, as well as the structure and 
operation of various embodiments of the present invention, are described in detail below with 
'Zl respect to the accompanying drawings. 



'Ho BRIEF DESCRIPTION OF THE DRAWINGS 

I**:' [15] A further understanding of the nature and advantages of the present invention 



i? may be realized by reference to the remaining portions of the specification and the drawings 

CI 

m wherein like reference numerals are used throughout the several drawings to refer to similar 
5 components. 

f\l [16] Figure 1 illustrates a system for monitoring financial transactions according to 

embodiments of the present invention; 

[17] Figure 2 illustrates the conversion of a transaction record to an alert according 

to embodiments of the present invention; and 

20 [18] Figure 3 illustrates a method of monitoring financial transactions according to 

the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

[19] Credit services may be established with essentially any type of person, entity, 

25 organization, business, or the like that wishes to take payments for goods or services in the 
form of a credit, and, for convenience of discussion, are generally referred to herein as 
"merchants". Such merchants may process a credit transaction based on an account identifier 
presented at the time of payment. The account identifier is used to identify the account to 
which the credit will eventually be posted. In many cases, the account identifier is provided 
30 on some type of presentation instrument, such as a credit card, debit card, smart card, stored 
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value card, or the like. Conveniently, the account identifier may be read from a point of sale 
device, such as those described in copending U.S. Application Nos. 09/634,901, entitled 
"POINT OF SALE PAYMENT SYSTEM," filed August 9, 2000 by Randy J. Templeton et 
al., which is a nonprovisional of U.S. Prov. Appl. No. 60/147,899, entitled "INTEGRATED 
5 POINT OF SALE DEVICE," filed August 9, 1999 by Randy Templeton et al,'the complete 
disclosures of which are herein incorporated by reference. However, the account identifier 
may be obtained in other ways, such as by visual inspection of the presentation instrument, 
by telephone, over the Intemet, and the like. 

[20] The user account information is transmitted to a credit processing service that 

|30 approves and processes the transaction information and provides payment to the merchant. 

■'ssr 

'f^ The credit processing service includes at least one platform server that receives and processes 

CI the transaction information. One example of a credit processing service is the service • 

1^: provided by First Data Corporation, Greenwood Village, Colorado. 

CI [21] For various reasons, especially in light of recent events involving terrorist 

UJ 

C|l 5 activities, it may be desirable to know when and where a specific account, identified by an 
'%l account identifier, is being or has been used. It may be fiirther desirable to know when and 
111 where the account is being used within a brief period of time after the account is used. In 

fact, in some cases, the information is desired in real time, or as close to real time as possible. 

[22] According to embodiments of the present invention, a credit processing 

20 service receives a list of target account identifiers. The list may be received, for example, 

fi-om a government agency interested in apprehending or monitoring the users of the accounts 
represented by the account identifiers. Alternatively, the list of targeted account identifiers 
may be provided by marketing researchers interested in monitoring the purchasing activities 
of the account users. It may also be the case that an account owner, such as a spouse, parent, 
25 or employer, wishes to monitor the usage habits of account users, such as a spouse, child or 
employee. Many other reasons for monitoring account activity by tracking the usage of 
targeted account identifiers are possible. 

[23] The credit processing organization then searches the transaction information 

transmitted to it for processing and identifies transactions involving any of the target account 
30 identifiers. Upon finding such a transaction, the processing service compiles a message 



6 



containing relevant portions of the transaction information and transmits the message to the 
generator of the target account identifier list or a designee of the generator. 

[24] Having described the present invention generally, it will be described in more 

detail with reference to Fig. 1, which illustrates an exemplary financial transaction 
5 monitoring system 100 according to the present invention. While Fig. 1 illustrates an 
exemplary financial transaction monitoring system, those of ordinary skill in the art will 
recognize other financial transaction monitoring systems to which the present invention may 
be applied or with which it may be used. Thus, this example of the present invention should 
not be considered limiting. 

n 

;flO [25] The system 100 includes a processing server 102 and a plurality of platform 

i^l servers 104. The processing server 102 is in communication with the platform servers 104 
M via a network 106, The processing server 102 and the platform servers 104 may be any of a 

tesb 

number of well known computing devices. For example, the processing server 102 and the 
jT^ platform servers 104 may be database servers, workstations, personal computers, 
■?^fl 5 combinations of the foregoing, and the like. The network 106 may be any of a number of 
i ji well known networks or network combinations that facilitate the transmission of electronic 
' '"^ signals. For example, the network 106 may be a local area network, a wide area network, the 

Internet, and the like. Many other examples for the processing server 102, platform servers 

104, and network 106 are possible. 

20 [26] The processing server 102 is configured to receive a file 108 fi-om a requestor 

110. The file 108 contains a list of target accoimt identifiers for which the requestor 110 
wishes to obtain transaction data. The target account identifiers may be credit card account 
numbers and the like, and may represent a suspect account, such as an account suspected of 
being related to illegal activity. The file 108 may or may not be in electronic form. For 

.25 example, the requestor 110 may send the file electronically via email, file transfer, and the 
like, Altematively, the requestor 110 may call the credit processing service on a telephone 
and relay the content of the file by voice or fax. It is also possible that the requestor 110 may 
hand deliver or mail the file 108 to the credit processing service. Other means for 
transferring the file 108 are possible. The file 108 may be sent to the credit processing 

30 service one a regular schedule, such as daily or hourly, or the file 108 may be isent to the 

credit processing service as additional target account identifiers are identified. In any case, 
the content of the file 108 is input in electronic form into the processing server 102. 
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[27] The platform servers 104 receive the list of target account identifiers from the 

processing server 102 via the network 106. Alternatively, the content of the file 108 may be 
relayed directly to one or more of the platform servers 104 by the requestor 110. The 
platform servers 104 may receive the list according to any of a variety of processes. For 
example, the platform servers 104 periodically may request the list from the processing server 
102, in response to which request the processing server 102 transmits the list. The request 
may be sent daily, or weekly, hourly, or according to any other periodic schedule. 
Alternatively, the processing server 102 may transmit the list according to a similar periodic 
schedule. In yet another altemative, the processing server 102 may transmit a notification to 
the platform servers 104 each time the list is updated at the processing server 102, in response 
to which the platform servers 104 may transmit a request when, for example, bandwidth 
permits. Many other process for transmitting the list of target account identifiers from the 
processing server 102 to the platform servers 104 are possible. It may also be the case that 
only portions of the list are sent to particular ones of the platform servers 104, according to 
the types of transaction information processed by each platform server. 

[28] The platform servers 104 are configured to receive transaction information 

112 from merchants or other entities that process credit transactions or accept account 
identifiers. Each platform server may receive transaction information 112 from a specific 
region that may be determined geographically or by other means. The transaction 
information 112 includes transaction records of transactions in which account identifiers are 
used. The transaction records include account identifiers used in the transaction. 
Additionally, the transactions records may contain other data, such as, for example, the place, 
date, and time of the transaction, the identity of the holder of the account represented by the 
account identifier, and the like. 

[29] Among other things, the platform servers 104 review the transaction 

information 1 12 for transaction records in which a target account identifier is involved. Upon 
the occurrence of such, the discovering platform server 104 produces an alert based on the 
transaction record. The alert may contain the target account identifier, the date of the 
transaction, the time of the transaction, the place of the transaction, and the like. It may be 
necessary for the platform server 104 to translate the transaction record into a different 
format, which will be described with reference to Fig. 2. 
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[301 Referring to Fig. 2, a transaction record 202 and an alert 204 are illustrated. 

The transaction record 202 may contain an electronic representation of the transaction in a 
machine readable form, the textual representation of which may not be very useful. Thus, the 
platform server may convert the machine readable electronic representation of the transaction 
5 into a different electronic format, the textual representation of which is more user friendly. 
For example, the alert 204 may include a user friendly electronic representation of the 
account holder name 206, the account identifier 208, the name of the merchant 210, the 
address of the merchant or the location where the account identifier was presented as 
payment 212, the date 214 and the time 216 of the transaction, and the like. 

i^O [31] Retuming to Fig. 1, the alert may be transmitted from a platform server 104 to 

the processing server 102. In some embodiments of the invention, the electronic format of 
C| the alert may be converted, as explained above, at the processing server 102 instead of at the 
i^f platform server 104 that generated the alert. It is advantageous, according to the present 

invention, for the alert to be transmitted from the platform server 1 04 to the processing server 

Q 

lj.i5 102 as soon as possible after the transaction takes place, preferably in real or near-real time. 

pi 

?f Near-real time may be any time period that is as close as possible to real time. For example, 

Cl real time may be within 45 minutes, fifteen minutes, ten minutes, five minutes, or even one 

111 

minute. Other examples of near-real time are also possible. 

[32] Upon receipt of an alert, the processing server 102 performs several tasks. 

20 The processing server 102 may display the content of the alert on a display device 1 14 

associated with the processing server 102 so that the alert may be viewed by an observer 118, 
such as an analyst. The display device 114 may be a computer monitor, a printer, or the like, 
or the display device may be another computing device, such as a personal computer, 
workstation, and the like. The display device 114 may be co-located with the processing 

25 server 102, or the display device 114 may be in communication with the server computer 102 
via a second network 116. The second network 116 may be the same network as network 
106, or it may be a different network. The second network 116 may be any of a number of 
well known networks or network combinations that facilitate the transmission of electronic 
signals. For example, the second network 116 may be a local area network, a wide area 

30 network, the Internet, and the like. Many other examples for the second network 116 are 
possible. 
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[33] The processing server 102 may also compile a list 120 of alerts and transmit 

the list 120 of alerts to the same or a different display device 1 14 for observation by the same 
or a different analyst or observer 118. The list 120 may be sent via the network 1 16 or by 
other means. 

[34] The processing server 102 may also process the alert and store the content of 

the alert for later use. For example, the processing server 102 may compile transaction data 
over time relating to an account until the account reaches a threshold, such as a spending 
limit. The processing server 102 may also compile information relating to the items or 
services purchased using a target account identifier for later use in marketing research. 

[35] The s processing server 102 may also generate a notification 122 based on the 

alert. The notification 122 may include the entire content of the alert or may include only a 
portion of the content of the alert. The notification may also include additional information 
not included in the alert. In other words, the processing server 102 may append additional 
information to the alert to create the notification 122. The processing server 102 then 
transmits the notification 122 to a personal computer 124 associated with a recipient 126. 
The personal computer 124 may be a pager, a mobile phone, a personal digital assistant, and 
the like. The personal computer 124 may also be a desktop or laptop computer. The 
notification may be transmitted via any of a number of methods, such as over a network or as 
a radio or satellite transmission. 

20 [36] The recipient 126 may be the requestor 1 10, or a designee of the requestor 

110. For example, the recipient 126 may be a law enforcement official in the vicinity of the 
location where the transaction took place, in which case the server computer may select the 
- recipient 126 based on the content of the alert. In other examples, the recipient 126 may be 
the account owner who desires to monitor the spending habits of an account user, in which 

25 case the notification may be sent only after a spending threshold is reached. The processing 
server 102 also may send the notification to multiple recipients. Many other possibilities 
exist. 

[37] Referring to Fig. 3, a method 300 of monitoring financial transactions 

according to the present invention is illustrated. The method includes receiving a list of 
30 target account identifiers at a processing server (operation 302). As previously discussed 
with reference to Fig. 1, the list may be received in many forms and according to many 

10 




different schedules, or no specific schedule. The operation 320 includes transcribing the list 
into a computer readable form, if necessary, and storing the list on the processing server. 

[38] At operation 304, the list is transmitted to one or more platform servers. Also 

as previously discussed with reference to Fig. 1, the process by which the list is transmitted to 
the one or more platform computers may include a periodic request fi-om each platform 
computer to transmit the list, in response to which the processing server transmits the list. 
The process may also include the processing server automatically transmitting the list to the 
platform computers, either on a periodic schedule or each time the list is updated at the 
processing server. In yet another alternative, the processing server may send a "list 
available" message to the platform computers when the list is updated, in response to which 
the platform servers request the list when able. Combinations of the aforementioned 
processes are also possible. 

[39] At operation 306, the platform computers monitor transaction information for 

target account identifiers fi-om the list. The operation 306 includes the platform servers 
receiving transaction information from merchants or other entities that accept account 
identifiers in exchange for goods or services in anticipation of later payment. The platform 
servers search for the target account identifiers in transaction records in the transaction 
information. 

[40] At operation 308, the platform servers send an alert to the processing server 

20 upon the occurrence of a match of a target account identifier to an account identifier in a 

transaction record. The alert may include the account identifier, the date, time, and place of 
the transaction, as well as other relevant information. Prior to sending the alert, the platform 
computer may translate the content of the alert fi-om one electronic format to a more user 
fiiendly electronic format. 

25 [41] At operation 310, the processing server may display the alert on a display 

device for observation by an analyst or other observer. The processing server may also 
display a compilation of alerts received by the processing server on the same or a different 
display device. 

[42] At operation 312, the processing server may send a notification to an analyst, 

30 the generator of the list of target account identifiers, or other designee of the generator. The 
notification may include the same information as the alert, additional information to the alert, 
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or a portion of the information in the alert. The notification may be sent, for example, by 
email, page, and the like. The notification may be received by a personal computing device 
such as a pager, personal digital assistant, desktop or laptop computer, or mobile phone wom 
or carried by, or simply accessible to the recipient. 

[43] Having described several embodiments, it will be recognized by those of skill 

in the art that various modifications, alternative constructions, and equivalents may be used 
without departing from the spirit of the invention. Additionally, a number of well known 
processes and elements have not been described in order to avoid unnecessarily obscuring the 
present invention. For example, those skilled in the art know how to arrange computers into 
a network and enable communication among the computers. Accordingly, the above 
description should not be taken as limiting the scope of the invention, which is defined in the 
following claims. 
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